78 matches found
CVE-2026-43499
CVE-2026-43499 Exploitation Notes Severity: HIGH CVSS: 7.8 Impact: Confidentiality, Integrity, Availability Published: 2026-05-21 Technical Summary CVE-2026-43499 is a vulnerability within the Linux kernel, specifically affecting the rtmutex component, which is responsible for managing real-time...
Lenovo-TB365FC-GhostLock-CVE-2026-43499
GhostLock for Lenovo TB365FC Root for ZUXOS / Android 16 via CVE-2026-43499 rtmutex removewaiter use-after-free plus a DirtyPipe credential patch. Loads a KernelSU LKM without unlocking the bootloader or flashing. Root is lost on reboot. Firmware: ZUXOS 1.5.10.178 Kernel:...
ASB-A-496407345
In removewaiter of rtmutex.c, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-43499-aristotle
CVE-2026-43499 — aristotle au/KDDI Xiaomi XIG04 Local privilege escalation tmp-root for the au/KDDI Xiaomi "aristotle" XIG04 on Android 12 , via CVE-2026-43499. It is a device-owner rooting primitive: it roots your own phone e.g. to re-enable ADB when developer options are unreachable. This is an...
asus-i005-cve-2026-43499
asus-i005-cve-2026-43499 Adaptation research of CVE-2026-43499 GhostLock on ASUS ROG Phone 5S ASUSI005. Conclusion: Vulnerability triggering and stack reclamation fully verified; the privilege escalation chain was not completed due to insufficient stack overwrite depth. Specifically: Stages 01.6...
Exploit for Use After Free in Linux Linux_Kernel
GhostLock for Google TV Streamer kirkwood / MT8696 Singl...
Exploit for Use After Free in Linux Linux_Kernel
CVE-2026-43499 exploit We successfully reproduced CVE-2026-434...
CLSA-2026-1783789821 Fix CVE(s): CVE-2026-43499
CVE-2026-53166 - futex/requeue: Prevent NULL pointer dereference in removewaiter on self-deadlock CVE-2026-53166 CVE-2026-43499 - rtmutex: Use waiter::task instead of current in removewaiter CVE-2026-43499 Miscellaneous upstream changes - Revert "ext4: fix warning in ext4iomapbegin as race betwee...
CLSA-2026-1783790385 Fix CVE(s): CVE-2018-12931, CVE-2026-43499
CVE-2026-53166 - futex/requeue: Prevent NULL pointer dereference in removewaiter on self-deadlock CVE-2026-53166 CVE-2026-43499 - rtmutex: Use waiter::task instead of current in removewaiter CVE-2026-43499 Bump ABI 4.4.0-285...
Exploit for Use After Free in Linux Linux_Kernel
CVE-2026-43499 – Linux Kernel rtmutex removewaiter proxy-lo...
Exploit for Use After Free in Linux Linux_Kernel
English | 中文 Honor 80 GT Privilege Escalat...
Exploit for Use After Free in Linux Linux_Kernel
Honor X50 Privilege Escalation: GhostLock CVE-2026-43499 A...
Exploit for Use After Free in Linux Linux_Kernel
GhostLock for HONOR 70 Pro SDY-AN00 English | 中文README.z...
CVE-2026-43499-poc
GhostLock — CVE-2026-43499 PoC Qualcomm 4.19 kernel Local privilege escalation exploiting CVE-2026-43499 — an rtmutex removewaiter bug that leaves a struct rtmutexwaiter dangling on the waiter's kernel stack kernel/locking/rtmutex.c, CWE-416 use-after-free. Adapted from NebuSec/CyberMeowfia...
AlmaLinux 9.6 [TuxCare] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1783793262)
"The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1783793262 advisory. - In the Linux kernel, the following vulnerability has been resolved: rtmutex: Use waiter::task instead of current in removewaiter...
CentOS Linux 8.5 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc (CENTOS8.5:CLSA-2026:1783789559)
The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1783789559 advisory. - In the Linux kernel, the following vulnerability has been resolved: rtmutex: Use waiter::task instead of current in removewaiter removewait...
Rocky Linux 9.6 [TuxCare] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1783793262)
"The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1783793262 advisory. - In the Linux kernel, the following vulnerability has been resolved: rtmutex: Use waiter::task instead of current in removewaite...
CentOS Linux 8.4 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1783789054)
The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1783789054 advisory. - In the Linux kernel, the following vulnerability has been resolved: i40e: Fix use-after-free in i40eclientsubtask Currently the ca...
kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock
A flaw was found in the Linux kernel's futex Fast Userspace Mutex requeue mechanism. When a non-top waiter attempts to requeue a Priority Inheritance PI futex it already owns, a NULL pointer dereference can occur. This issue, specifically within the removewaiter function during a self-deadlock...